Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          t2PJUzEihCF7S2+DBJeU3lJ3ePHvkL3hfdkfY4y7CaU=
Subject key identifier:   2A:DD:6E:FC:3E:38:8C:CC:DA:B7:A0:C2:A7:7F:01:29:26:F7:3C:26
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       23A69114E8B77055CFA659DD302E4364DDAC68DD
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:38 +0000
ROA not before:           Mon 03 Jul 2023 10:24:38 +0000
ROA not after:            Mon 01 Jul 2024 10:29:38 +0000
asID:                     28594
IP address blocks:        200.218.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:91:14:e8:b7:70:55:cf:a6:59:dd:30:2e:43:64:dd:ac:68:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:38 2023 GMT
            Not After : Jul  1 10:29:38 2024 GMT
        Subject: CN=2ADD6EFC3E388CCCDAB7A0C2A77F012926F73C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:8b:a8:e0:42:fc:22:e5:e8:39:92:76:40:
                    2c:f0:8e:b0:35:78:fb:b6:82:df:76:d8:8e:95:13:
                    99:6a:eb:ba:b9:12:b1:64:67:07:70:4d:8c:14:dc:
                    34:8e:e5:a5:d1:11:fd:b6:7b:65:6a:94:69:69:c9:
                    8e:9a:97:58:77:92:d9:6f:5d:fe:70:3d:44:32:e5:
                    c9:cb:eb:6f:86:0e:46:df:f5:00:e1:d2:c7:ad:19:
                    9e:ef:71:de:43:4b:83:57:40:28:da:33:39:0b:77:
                    cb:11:48:6e:09:b7:cd:d8:17:97:e9:d0:ce:be:10:
                    f5:79:fd:b4:ee:37:31:f4:c0:55:a1:04:3f:9c:88:
                    15:f6:6a:52:de:6c:cf:b2:b5:86:bc:f0:38:78:83:
                    03:9a:a6:de:ef:da:9d:03:d8:09:63:7f:b5:fb:de:
                    10:de:52:e0:6e:b7:33:b8:78:e3:22:da:04:a2:b5:
                    53:60:99:11:6c:56:22:0d:06:5a:c9:96:a6:37:16:
                    71:d7:2f:e0:fd:f6:40:b1:43:b2:a0:8e:46:7e:f3:
                    35:1e:44:08:55:36:fa:1d:69:6a:ba:31:3d:ba:51:
                    65:ac:50:76:a3:fe:e6:5a:af:12:6d:64:ed:35:26:
                    11:e7:dd:27:ae:77:b9:f8:89:6e:d1:1f:33:d5:0a:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DD:6E:FC:3E:38:8C:CC:DA:B7:A0:C2:A7:7F:01:29:26:F7:3C:26
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:12:23:bf:08:0c:02:54:d8:6a:58:2c:6a:2a:b9:45:62:b6:
         97:f8:a4:f9:e7:a2:2c:49:22:1a:2e:18:bc:74:19:b4:72:1f:
         70:d2:a7:48:dc:f8:55:a9:21:e7:fd:be:31:14:d9:d5:36:60:
         0b:3a:04:9f:59:2e:13:68:4c:08:11:94:f7:47:20:e4:04:f7:
         b8:f1:d6:db:03:79:a8:10:d0:bd:ec:1e:0e:75:a9:77:a4:f2:
         77:25:12:7a:15:62:d3:66:f6:9a:a1:9a:a1:03:84:65:53:98:
         f2:71:4e:ec:6b:9c:c6:09:e3:e6:83:15:43:74:72:79:91:58:
         00:27:08:9e:8d:f2:9f:09:c7:0c:7c:a7:44:6c:d7:d0:65:55:
         c3:09:1b:da:80:b3:e3:0f:92:d4:e0:37:4a:d2:35:23:23:42:
         be:01:ae:ab:5e:2f:72:26:00:2e:5a:9c:48:f6:8c:eb:37:69:
         27:cb:d8:28:29:19:42:65:1e:11:62:fa:78:73:40:76:e6:92:
         0a:fc:16:1b:5a:c1:3a:98:64:1e:5a:ac:4a:52:c1:29:a0:9e:
         fa:d2:8b:8d:22:e0:42:17:e3:6d:a1:f1:39:0f:5b:2b:f3:04:
         a9:2e:4c:09:d4:0c:bc:ca:7d:28:f9:c8:f3:60:63:e0:45:de:
         3b:ea:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org